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AMENDMENTS TO THE CLAIMS 

Pursuant to 37 C.F.R. § 1.121 the following listing of claims will replace all prior versions, 
and listings, of claims in the application. 

1 - 2. (Canceled) 

3. (withdrawn) A method for establishing a common key for a group of at least three subscribers, 
the method comprising: 

generating by each subscriber Ti of the at least three subscribers a respective message Ni = (g z ' mod 
p) from a publicly known element g of large order of a publicly known mathematical group G and a 
respective random number zi and sending the respective message from the respective subscriber to 
all other subscribers Tj of the at least three subscribers, each respective random number zi being 
selected or generated by the respective subscriber Ti; 

generating by each subscriber Ti a transmission key k" from the messages Nj received from the 
other subscribers Tj, j * i. and the respective random number zi according to k' j : - Nf = (g^)*' ; 
sending by each subscriber Ti the respective random number zi in encrypted form to all other 
subscribers Tj by generating the message Mij according to Mij := E(k 1J , zi), E(k' J , zi) being a 
symmetrical encryption algorithm in which the data record zi is encrypted with the transmission key 
k IJ ; and 

determining a common key k by each subscriber Ti using the respective random number zi and the 
random numbers zj, j * i, received from the other subscribers according to 
k: = f(zl,...,zn), 

f being a symmetrical function which is invariant under a permutation of its arguments. 

4. (withdrawn) The method as recited in claim 3 wherein the transmission key k iJ is known to 
subscriber Tj according to k' j = k Jt . 
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5. (Currently Amended) A method for establishing a common key for a group of at least three 
subscribers for transmitting messages over a communica t ion channel , the method comprising the 
steps of : 

generating, by each subscriber Tj, a respective message N.-^-fg^nned-p) Nj = (u 4 mod p) 
from a publicly known clement g of large order of a publicly known mathematical group G and a 
respective random number [[zij] zi, i = 1 to n. where n is the number of subscribers in the grou p of 
at least three subscribers : m& 

sending the respective message,, by each subscriber except a predetermined first subscriber 
T, of the at least three subscribers, to the first subscriber T !T ^e}^fespeet4ve^andemH^nfeer-4j5^i 
b e ing s e lected or generated by the resp e ctive subscriber [[Ti]j ; 

encrypting, by the first subscriber Ti. the received messages Nj of the other subscribers Tj, j 
^ 1, with the random number zl to form a respective transmission key k lj for each subscriber Tj i 4 
i; 

sending, by the first subscriber the random number zl to all other subscribers Tj J ■£ 1 in 
encrypted form by generating a message My according to My := E(k lj . zl), E(k lj , zl) being a 
symmetrical encryption algorithm in which the random number zl is encrypted with the 
transmission key k 1 '; and 

determining a common key k, by each subscriber [[Tj]] Jj. using th e-vakte s Ni and Nj, j ^ h 
afld-the-fand^ai-mHftb or zl sent by the first subscriber 11 in e ncrypted form using an assignment k:-^ 
h (zl, g 22 , .... g 2 "}, h (xl, x2, xn) being a function which is symmetrical in the arguments x2, 
xn , the common key k being useable for transmitting messages over a communication channel . 
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6. (Currently Amended) The method as recited in claim 5 wherein the transmission key is known to 
subscriber Tj according to = k* 1 . 

7. (New) A method for establishing a common key for a group of subscribers for encryption and 
decryption of messages, the method comprising the steps of: 

each of the subscribers Tj generating a respective random number zj, where j goes from 1 to 
n and n is the number of subscribers in the group of subscribers; 

each of the subscribers Tj generating a respective first message N, = (g 7J mod p) from a 
publicly known clement g of large order of a publicly known mathematical group G; 

each of the subscribers Tj, j £ 1, sending the respective first message to a first subscriber Ti; 

the first subscriber Ti computing a transmission key k I] - Nj zl mod p for each of the other 
subscribers Tj, j ^ 1 , based on the received respective first message Ny i- 1 ; 

the first subscriber Tj encrypting a second message My := E(k lj , zl) for each of the other 
subscribers Tj, j # 1, where E(k lj , zl) is a symmetrical encryption algorithm in which zl is 
encrypted with the transmission key k lj ; 

the first subscriber T t sending the encrypted second message M\ } to each of the other 
subscribers Tj, j i- 1 ; and 

each of the subscribers Tj computing a common key k according to an assignment k:=h(zl, 
g 22 , ... g*"), where h(xl,x2...xn) is a symmetrical function. 

8. (New) The method according to claim 7, wherein the respective random number zj is selected 
from the set {1, . . . p-2}. 
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9. (New) The method according to claim 7, wherein the length of p is at least 1 024 bits, 

10. (New) The method according to claim 1, wherein g has a multiplicative order of at least 2 160 . 

1 1 . (New) The method according to claim 7 wherein the transmission key is known to a respective 
subscriber Tj according to k' j = k J '. 

12. (New) The method according to claim 7, wherein h(zl, g 22 , ... g zn ) = g zl * zl * g* 2 * 21 * . . . g*** 

13. (New) A method for establishing a common key for a group of subscribers for encryption and 
decryption of messages, the method comprising the steps of: 

each of the subscribers Tj generating a respective random number zj, where j goes from 1 to 
n and n is the number of subscribers in the group of subscribers: 

each of the subscribers Tj storing the respective random number zj in a respective memory: 

each of the subscribers Tj generating a respective first message Nj = (g' ;l mod p) from a 
publicly known element g of large order of a publicly known mathematical group G; 

each of the subscribers T J: j f- 1, sending the respective first message to a first subscriber Tj; 

the first subscriber Ti storing each of the received first messages in a memory; 

the first subscriber Ti computing a transmission key k ,j = Nj Zi mod p for each of the other 
subscribers Tj, j #1, based on the received respective first message NJ £ 1, 
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the first subscriber T t encrypting a second message M|j := E(k f \ zl) for each of the other 
subscribers Tj, j £ 1, where E(k ij , zl) is a symmetrical encryption algorithm in which zl is 
encrypted with the transmission key k lj ; 

the first subscriber Tj sending the encrypted second message M|j to each of the respective 
other subscribers Tj, j 1 1; 

each of the respective other subscribes Tj, j f 1, storing the received encrypted second 
message in the respective memory: and 

each of the subscribers Tj computing a common key k according to an assignment k:=h(zl, 
g a , ... g m ), where h(xl,x2..,xn) is a symmetrical function, and n is the number of subscribes in the 
group. 

14. (New) The method according to claim 13, wherein a maximum number of transmission rounds 
required is two, 

15. (New) The method according to claim 13, further comprising the steps of: 

one of the respective subscribers Tj using the computed common key k to encrypt a third 
message; 

the one of the respective subscribers Ti transmitting the encrypted third message to each of 
the other respective subscribers; 

each of the other respective subscribers Tj, j f- i decrypting the received encrypted third 
message using the computed common k. 
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